Skip to main content

Module verify

Module verify 

Source
Expand description

Verify command.

Verifies an ECDSA P-256 signature on-chip.

The driver exposes the “External” verify mode only: the host provides the 64-byte public key (uncompressed X || Y), the 64-byte signature (R || S), and the 32-byte digest is taken from TempKey (loaded via AteccChannel::nonce_passthrough). The “Stored” mode (verify against a public key already in a slot) and “Validate” mode (chained validation of a previously-stored signature) are not used in this project’s workflow.

Reference: CryptoAuthLib lib/calib/calib_verify.c, constants VERIFY_MODE_EXTERNAL (0x02), VERIFY_KEY_P256 (0x0004).

Constants§

VERIFY_EXTERNAL_DATA_SIZE 🔒
Size of the Verify External data payload (signature || pubkey).
VERIFY_KEY_P256 🔒
param2 key id for the P-256 (NIST secp256r1) curve.
VERIFY_MODE_EXTERNAL 🔒
param1 mode: External verify.